Type "make generic" to compile for Linux, FreeBSD, NetBSD or OpenBSD. It should work on most Unix-like operating systems, but only those have been fully confirmed. If you're compiling for QNX, type "make qnx" instead.

Type "make install" to install the "rrs" binary under /usr/local/bin/ and the manpage under /usr/local/man/man1/. If you want to install those files under /usr/bin/ and /usr/man/man1/ instead, type: make PREFIX=/usr install

What's New in This Release:

SSLv3/SSLv2 support, CRL, the -b and -0 options (May 29 2004) The -S option or --ssl=proto can be used to choose which encryption protocol supported by OpenSSL to use (TLSv1, SSLv3 and SSLv2 are supported).

The -b option allows you to choose source port. rrs will bind to port X when connecting out, not the default kernel-assigned port. This'll be useful for bypassing fake-secure fw configs.

The -0 option will simply do setuid(geteuid()) if rrs has been chmodded e.g. 4755/6755 (or setgid(getegid()) if it's only 2755).

The -0 option is designed for offering a root shell from non-root accounts during pen-tests (i.e. sanctioned backdoor infiltrations).

CRL support has been added and CRL files can be loaded with the -C option, the -C option (--ca or --crl) can now also be used to include an arbitrary amount of certificates to trust or CRL files of certificates not to trust.

I have also included openssl_scripts for easily creating a root CA, subordinate CA(s) and client/server certificates. These scripts can be used for other purposes than rrs aswell.